021f8aefdfa224bf46ab525700b9cbf04607a8fb2be93cd1f9fc4b3b42306b63 | Triage

Sharing

General

Target

021f8aefdfa224bf46ab525700b9cbf04607a8fb2be93cd1f9fc4b3b42306b63
Size

17KB
Sample

221019-3qj4msdeek
MD5

a1d683596dd79e792e699520b0e96490
SHA1

80e34fb604cefdf0acc718df951951457cbfd0d1
SHA256

021f8aefdfa224bf46ab525700b9cbf04607a8fb2be93cd1f9fc4b3b42306b63
SHA512

2cc7272d0689b4358f1b783e71bcb2b6be413fc803f383c948a5d413aa98aa12640f58fe9ec367fa77084ba698f6b23a3e4beb2f087a1cae97220de80e42aea0
SSDEEP

192:HuGsE62lHY+eUDkZxT3ACgZQpVFvwTXTwh4xIy8XAd2SPydp5efH+C2u8:OlEhuYwzOQpf2XTM+L8X/SPyd+f+1J

Score

8^/10

Malware Config

Targets

- Target
  
  021f8aefdfa224bf46ab525700b9cbf04607a8fb2be93cd1f9fc4b3b42306b63
- Size
  
  17KB
- MD5
  
  a1d683596dd79e792e699520b0e96490
- SHA1
  
  80e34fb604cefdf0acc718df951951457cbfd0d1
- SHA256
  
  021f8aefdfa224bf46ab525700b9cbf04607a8fb2be93cd1f9fc4b3b42306b63
- SHA512
  
  2cc7272d0689b4358f1b783e71bcb2b6be413fc803f383c948a5d413aa98aa12640f58fe9ec367fa77084ba698f6b23a3e4beb2f087a1cae97220de80e42aea0
- SSDEEP
  
  192:HuGsE62lHY+eUDkZxT3ACgZQpVFvwTXTwh4xIy8XAd2SPydp5efH+C2u8:OlEhuYwzOQpf2XTM+L8X/SPyd+f+1J
Score

8^/10
- Executes dropped EXE
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2